ELSA-2021-9478

ELSA-2021-9478 - openssl security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2021-10-13

Description

[1.0.2k-22]
- fix CVE-2021-23841 openssl: NULL pointer dereference
in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126

Related CVEs

CVE-2021-23840

CVE-2021-23841

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	openssl-1.0.2k-22.ksplice1.el7_9.src.rpm	c6324a15759a11be7bef53a8c47656ae84ec4f606554520085fe18e64d087454	ELSA-2017-3518	ol7_aarch64_userspace_ksplice
	openssl-1.0.2k-22.ksplice1.el7_9.aarch64.rpm	b1e4db7a3255ce9eb8e64761d9e549a64f4122c0c543010a3d56b51635b33247	ELSA-2017-3518	ol7_aarch64_userspace_ksplice
	openssl-devel-1.0.2k-22.ksplice1.el7_9.aarch64.rpm	38983975b84bcf5228a67a70a385c8f9e3050a3bb9252fbf0184723bcdd7383d	ELSA-2017-3518	ol7_aarch64_userspace_ksplice
	openssl-libs-1.0.2k-22.ksplice1.el7_9.aarch64.rpm	73e7a908594952d6e70b2df693466bf50246579d1fe8ab9e7006aa493d9d67b0	ELSA-2017-3518	ol7_aarch64_userspace_ksplice
	openssl-perl-1.0.2k-22.ksplice1.el7_9.aarch64.rpm	035e470ef1129ae48ee4fdb6f5f3af7ee4b42551d78d35f0ef966eb70ff49593	ELSA-2017-3518	ol7_aarch64_userspace_ksplice
	openssl-static-1.0.2k-22.ksplice1.el7_9.aarch64.rpm	370615adda15e2eec7c00e5f9b79816827f5e8c29366ac021406ff0dc8ef1355	ELSA-2017-3518	ol7_aarch64_userspace_ksplice
Oracle Linux 7 (x86_64)	openssl-1.0.2k-22.ksplice1.el7_9.src.rpm	c6324a15759a11be7bef53a8c47656ae84ec4f606554520085fe18e64d087454	ELSA-2017-3518	ol7_x86_64_userspace_ksplice
	openssl-1.0.2k-22.ksplice1.el7_9.x86_64.rpm	e790e5d89f23185302522607e486ca1e2a75bf39ceeace1a1af76dcd908e8eb6	ELSA-2017-3518	ol7_x86_64_userspace_ksplice
	openssl-devel-1.0.2k-22.ksplice1.el7_9.i686.rpm	d884ea9d83ecbe2ceadede4d68d2223f69c1910c070ba1f9e3b2e194d54cde27	ELSA-2017-3518	ol7_x86_64_userspace_ksplice
	openssl-devel-1.0.2k-22.ksplice1.el7_9.x86_64.rpm	4f48edc3da51195dd509ec8cc272332e3f6bdb0ed16820dc80fb3b9f29062473	ELSA-2017-3518	ol7_x86_64_userspace_ksplice
	openssl-libs-1.0.2k-22.ksplice1.el7_9.i686.rpm	ae18ddc0ee7d3b69568a2e92690eb1219e92b8602fe8582effb8fc6c9dffc27b	ELSA-2017-3518	ol7_x86_64_userspace_ksplice
	openssl-libs-1.0.2k-22.ksplice1.el7_9.x86_64.rpm	bc35584cc2a640a929e60b532f839ebd3daa8439a661f486429bbeefed56e5c6	ELSA-2017-3518	ol7_x86_64_userspace_ksplice
	openssl-perl-1.0.2k-22.ksplice1.el7_9.x86_64.rpm	e7448c03a451a72af6f44fec54a69e8391a1fb8d0803c25784b2ff2af81c57fa	ELSA-2017-3518	ol7_x86_64_userspace_ksplice
	openssl-static-1.0.2k-22.ksplice1.el7_9.i686.rpm	db4a12f3fee290ae19f3f7da823e2c091d4632a4821dfe6ef5e54d6ae6d8de8a	ELSA-2017-3518	ol7_x86_64_userspace_ksplice
	openssl-static-1.0.2k-22.ksplice1.el7_9.x86_64.rpm	e6a969fb27d15fcf34d617c553346fbe5c42a60e000716f55a94b764932a1131	ELSA-2017-3518	ol7_x86_64_userspace_ksplice

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team